Все уязвимости

Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

Astro: Server island encrypted parameters vulnerable to cross-component replay

AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

Packet CTR reports a full success length after the counter is exhausted

wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

Consensys Discovery Nonce Reuse

Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

Reusing a Nonce, Key Pair in Encryption in HLOS

PheonixAppAPI has visible Encoding Maps

Session takeover vulnerability

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

Libsoup: libsoup: authentication bypass via digest authentication replay attack

wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

strongMan vulnerable to private credential recovery due to key and counter reuse

Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

hpke-js reuses AEAD nonces

Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may a

SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack

Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryptio